基于Flash Extractor芯片提取方案,受损Nand flash芯片数据分析,主控方案分析,TF一体盘引脚定义分析

Flash Extractor芯片分析电子取证技术2024培训报名,请发报名信息至:wd@wdsos.com
当前位置:首页 > 资源模型 > Monolith主控 Monolith主控
SD Part 1-2
Monolith SD_5   98 3a 98 a3   1x2  
peGflash extractor
 
Layout
  SD_20 v2 1148_1142
Mix
  Input
    Order  0/1
  Xor 5061
    Block     0x600000
    Page      0x4000
    Module    256
    BP Trash  false
  Block Pair
    Block  0x600000
    Page   0x4000
  Join by Dump
    Parts  2
Assembler
  Block Number
    Block Size      0xc00000
    Bank Space      0x4000
    Banks           00 / 0x000 / 0x6ff
  Actions
    Scan
Comments
  by Arvika
  RAW recovery


Monolith SD_5   98 3a a4 93   1x2  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  0/1
  Join by Page
    Parts  2
    Page   0x200
  Block Pair
    Block  0x800000
    Page   0x8000
Assembler
  Block Number
    Block Size   0x1000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika
  RAW recovery
Monolith SD_5   98 3a a4 93   2x2  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  1/3/0/2
  Join by Page
    Parts  2
    Page   0x200
  Block Pair
    Block  0x800000
    Page   0x8000
  Join by Page
    Parts  2
    Page   0x10000
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika
  RAW recovery
  dump order can be other
 
 
 
 
Monolith SD_5   98 3c a5 93   1x4  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  0/2/1/3
  Join by Page
    Parts  2
    Page   0x200
  Block Pair
    Block  0x800000
    Page   0x8000
  Join by Page
    Parts  2
    Page   0x10000
  Block Rotate
    Block  0x2000000
    Page   0x20000
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x4000
    
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 9646
  
  May be need add Block Rotate
  May be Bank Space is different
Monolith SD_5   98 3c a5 93   2x2  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  1/2/0/3
  Join by Page
    Parts  2
    Page   0x200
  Block Pair
    Block  0x800000
    Page   0x8000
  Join by Page
    Parts  2
    Page   0x10000
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x4000
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  by Arvika
  RAW recovery
  dump order can be other
Monolith SD_5   98 de 94 93   1x1  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  0
  Block Pair
    Block  0x400000
    Page   0x4000
Assembler
  Block Number
    Block Size   0x800000
    Bank Space   0x4000
  Actions
    Scan
    Find Bank Size
Comments
  by Arvika
  Only RAW recovery possible
  ~55% good photos

Monolith SD_5   98 de 94 93   1x2  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x400000
    Page   0x4000
  Join by Page
    Parts  2
    Page   0x8000
Assembler
  Block Number
    Block Size   0x1000000
    Bank Space   0x4000
  Actions
    Scan
    Find Bank Size
Comments
  by Arvika
  Only RAW recovery possible
  ~55% good photos

 
Monolith SD_5   98 de 94 93   2x2  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  1/2/0/3
  Join by Page
    Parts  2
    Page   0x200
  Block Pair
    Block  0x800000
    Page   0x8000
  Join by Page
    Parts  2
    Page   0x10000
Assembler
  Block Number
    Block Size   0x2000000
    Bank Space   0x400
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
  by Arvika
  RAW recovery

 
Monolith SD_5   98 de 98 92   1x1  
peGflash extractor
 
Layout
  PS2251 1138_1132 v3
Mix
  Input
    Order  0
  Cut Bad Bytes
  Xor 5061
    Block     0x204000
    Page      0x2000
    Module    256
    BP Trash  true
  Block Pair
    Block  0x204000
    Page   0x2000
  Block Cut
    Block  0x400000/0x8000
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x2000
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika
  RAW recovery


Monolith SD_5   98 de 98 92   1x1   v2  
peGflash extractor
 
Layout
  PS8035 1138_1132
Mix
  Input
    Order  0
  Cut Bad Bytes
  Xor 5061
    Block     0x204000
    Page      0x2000
    Module    256
    BP Trash  true
  Block Pair
    Block  0x204000
    Page   0x2000
  Block Cut
    Block  0x400000/0x8000
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x2000
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 9652
  Raw Recovery

 
Monolith_SD_3   ec d5 14 b6   1x1  
peGflash extractor
 
Layout
  SM3254 528
Mix
  Input
    Order  0
  Block Pair
    Block  0x80000
    Page   0x1000
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size

Comments
  By JeremyB - SD - GENERIC_2 - 100% Recovery
Monolith_SD_4   ad d7 94 9a   1x4  
peGflash extractor
 
Layout
  SM3254 1066 v3 Invert
Mix
  Input
    Order  0/2/1/3
  Block Pair
    Block  0x200000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x4000
  Join by Dump
    Parts  2
Assembler
  Block Number
    Block Size      0x800000
    Banks           0..7 / 0x000 / 0x0ff
    
    // Sector Updates
    Update Size     0x4000
    Update Enable   true
    
  Actions
    Scan
    
Comments
    by JeremyB - Read using Ignore_Busy




 
Monolith_SD_5   98 3a 85 93   2x2  
peGflash extractor
 
Layout
  PS8210 1106_1102 Xor 0561_256 v2
Mix
  Input
    Order  0/2/1/3
  Join by Page
    Parts  2
    Page   0x200
  Join by Page
    Parts  2
    Page   0x8000
Assembler
  Block Number
    Block Size   0x1000000
    Bank Space   0x800
  Actions
    Scan
    Find Bank Size
Comments
  by JeremyB
  Only RAW recovery possible
  ~60% good photos

 
Monolith_SD_5   98 d7 94 32   1x1  
peGflash extractor
 
Layout
  SD_20 v2 1109_1103 Xor 0561_128
Mix
  Input
    Order  0
  Block Pair
    Block  0x100000
    Page   0x2000
  Divide
    Field  Block Rotate
    Value  0x10
  Block Rotate
    Block  0x200000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x200000
    Bank Space      0x4000
    Image Cut       0x2400000/(0x8000/0x4000/(0x4000/0x4000)*61/0x4000/0x8000)*8
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 5919

 
Monolith_SD_5   98 de 94 82   1x1  
peGflash extractor
 
Layout
  SD_20 v2 1109_1103 Xor 0561_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Block Rotate
    Block  0x400000
    Page   0x2000
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x4000
    Image Cut       0x01000000/(0x10000/0x8000/(0x8000/0x8000)*61/0x8000/0x10000
)*22
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 6193
  If first block in image is rotated, image Cut will work wrong
  In this case make Raw Recovery
  
Monolith_SD_5   98 de 94 93   1x1   v2  
peGflash extractor
 
Layout
  SD_20 v2 1108_1102 Xor 0561_256
Mix
  Input
    Order  0
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x4000
    Image Cut       0/(0x8000/0x4000/(0x4000/0x4000)*125/0x4000/0x8000)*20
    Banks           00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 10721
  Raw Recovery
  Only 50% photos was good



Monolith_SD_5   ad d7 94 9a   1x2  
peGflash extractor
 
Layout
  SD_20 1074_1070 Xor C5F6_128
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Block Rotate
    Block  0x400000
    Page   0x2000
  Join by Dump
    Parts  2
Assembler
  Block Number
    Block Size      0x400000
    Bank Space      0x400
    Image Cut       0x3800000/(0x10000/0x8000/(0x8000/0x8000)*61/0x8000/0x10000)
*4
    
    Banks           00 / 0x000 / 0x3c9
                    01 / 0x000 / 0x3c9
    
  Actions
    Scan
Comments
  Serg for forum 6741
 
 



 
Monolith_SD_5   ec d3 14 25   1x1  
peGflash extractor
 
Layout
  PS8000 528
Mix
  Input
    Order  0
  Block Pair
    Block  0x40000
    Page   0x800
Assembler
  Block Number
    Block Size   0x80000
    Bank Space   0x800
    Banks        00 / 0x000 / 0x7af
  Actions
    Scan
Comments
    By Arvika
    FAT32 found at 0xc1f200






 

 
上一篇:SD Part 1-1
下一篇:SD Part 2
Copyright(C)2014 西数科技(江苏)有限公司 wdsos.com 备案号:苏ICP备09074223号 苏公网安备:32010202010982号
地址:江苏省南京市玄武区珠江路435号华海大厦6楼601室(同庆楼右侧上电梯) 
地址:江苏省淮安市清江浦区枚皋路中兴软件园研发楼503室 
数据恢复:025-86883952  司法鉴定:13813824669 
|公众号|微博|论坛|百家号|